$ rpki-client -vvf rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft File: rSHpWiYaLoAl4zypVIJcFHCzt6M.mft (raw, json) Hash identifier: BNfDqhvQtKLHkFOLxc9PQ8i/NQuC147xq6fzvJ5WnRU= Subject key identifier: 8C:F4:A0:7E:F2:3D:E9:0B:A3:73:59:88:CF:8A:79:1B:81:C6:49:44 Authority key identifier: AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3 Certificate issuer: /CN=A91508C4/serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3 Certificate serial: 07B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft Manifest number: 07AB Signing time: Thu 26 Mar 2026 21:19:44 +0000 Manifest this update: Thu 26 Mar 2026 21:19:44 +0000 Manifest next update: Thu 02 Apr 2026 21:19:44 +0000 Files and hashes: 1: rSHpWiYaLoAl4zypVIJcFHCzt6M.crl (hash: /z7M5l5nU4aiZJdTIReluLx9Ox9NnbMlCyElZHtOKfs=) 2: B855A21C3E1211EB8D23EB6CC4F9AE02.roa (hash: l3JeAQ3S0YOaZPvLg1VADUfgUPauzx1iQ/ocLZ5FTmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 21:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1971 (0x7b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91508C4, serialNumber=AD21E95A261A2E8025E33CA954825C1470B3B7A3 Validity Not Before: Mar 26 21:19:44 2026 GMT Not After : Apr 2 21:19:44 2026 GMT Subject: CN=69c5a2f0-c561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:b6:1f:f2:e8:8e:12:ed:4f:cd:6e:f0:63: 56:ec:c7:c7:28:ab:f7:93:db:03:f8:6e:e9:22:48: 2f:d6:cc:69:79:4d:0e:b1:c7:91:ba:9b:15:31:7e: e5:ca:ec:f5:ad:8b:f4:5a:79:95:df:fa:79:e9:dd: e1:f9:cb:f5:d8:ca:69:b4:07:b8:be:5c:e0:1c:4c: 34:e6:fd:63:36:db:4b:9b:13:4a:bd:a1:41:0b:8a: 9d:6a:4c:37:6e:1b:23:57:7a:0d:4c:b2:ae:30:df: 1b:a5:99:19:3f:4c:f2:06:f9:14:5b:9a:af:47:68: cd:a2:74:f4:fc:82:29:c8:46:c3:a6:54:89:b4:72: 42:2c:e4:5b:f9:41:b8:1b:8b:95:4a:87:60:ee:c2: d3:3c:04:c3:34:d1:55:dc:cc:09:9a:18:cf:1f:cf: bb:e5:89:a1:ea:f9:a1:e2:60:57:49:3b:c4:c4:47: 9a:f9:fa:d6:14:b7:88:66:65:97:46:07:a0:2a:12: 80:d6:21:c0:49:11:3d:b2:58:4a:62:01:6d:14:67: 94:dd:06:6e:f8:90:14:66:69:16:ad:39:cb:d2:0e: a1:a0:02:86:4d:4d:76:a4:6c:33:cb:a0:56:4e:66: bd:49:ee:92:60:ca:d9:5f:4b:1d:5b:c5:fb:bd:b2: 75:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F4:A0:7E:F2:3D:E9:0B:A3:73:59:88:CF:8A:79:1B:81:C6:49:44 X509v3 Authority Key Identifier: keyid:AD:21:E9:5A:26:1A:2E:80:25:E3:3C:A9:54:82:5C:14:70:B3:B7:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rSHpWiYaLoAl4zypVIJcFHCzt6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508C4/532FDCDC3E1111EBAE00216CC4F9AE02/rSHpWiYaLoAl4zypVIJcFHCzt6M.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:56:7c:b1:05:9b:ab:af:79:76:8c:b2:72:3c:66:dc:ef:e2: fb:47:38:8c:23:a5:1d:97:5d:99:b0:25:a6:04:4f:8c:bd:c5: 20:4d:84:1e:e5:f6:b0:bc:ae:41:dc:0b:27:33:b6:7a:a2:b0: a3:f7:c8:19:a3:27:8c:8f:67:80:2f:87:89:b3:50:22:66:a3: bc:55:f6:f4:28:23:96:57:ed:ba:ad:21:2b:55:47:d4:d5:de: f7:49:64:8b:c3:c0:58:da:57:c5:c8:55:20:a2:94:45:37:80: e2:3e:d1:8c:a0:23:3c:c3:cf:1c:34:29:2f:7a:db:ad:b9:1b: e5:19:d8:33:cb:7f:93:0b:4a:51:99:32:87:94:2f:49:76:de: 33:4f:df:23:ab:43:e8:c9:d3:1c:70:f9:d9:62:f5:58:b5:f3: d7:8c:7b:2b:82:9d:ed:4e:11:c0:0e:d4:ff:24:8f:82:b0:63: c4:72:89:bd:02:5f:21:14:1c:e9:08:c1:38:d2:a4:5f:fa:3e: b7:2a:ac:27:6d:c6:1b:80:45:47:1e:15:b0:44:ef:86:ca:42: b2:ac:6e:41:bf:bc:6e:0d:d0:e2:ac:3e:f4:26:2a:ae:6f:3c: 75:25:02:23:ef:e3:5e:cc:f1:28:3f:e3:a3:86:09:bb:5b:d8: 82:cd:03:29 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTA4QzQxMTAvBgNVBAUTKEFEMjFFOTVBMjYxQTJFODAyNUUzM0NBOTU0ODI1QzE0 NzBCM0I3QTMwHhcNMjYwMzI2MjExOTQ0WhcNMjYwNDAyMjExOTQ0WjAYMRYwFAYD VQQDEw02OWM1YTJmMC1jNTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoK62H/LojhLtT81u8GNW7MfHKKv3k9sD+G7pIkgv1sxpeU0OsceRupsVMX7l yuz1rYv0WnmV3/p56d3h+cv12MpptAe4vlzgHEw05v1jNttLmxNKvaFBC4qdakw3 bhsjV3oNTLKuMN8bpZkZP0zyBvkUW5qvR2jNonT0/IIpyEbDplSJtHJCLORb+UG4 G4uVSodg7sLTPATDNNFV3MwJmhjPH8+75Ymh6vmh4mBXSTvExEea+frWFLeIZmWX RgegKhKA1iHASRE9slhKYgFtFGeU3QZu+JAUZmkWrTnL0g6hoAKGTU12pGwzy6BW Tma9Se6SYMrZX0sdW8X7vbJ1pwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIz0oH7y PekLo3NZiM+KeRuBxklEMB8GA1UdIwQYMBaAFK0h6VomGi6AJeM8qVSCXBRws7ej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDhDNC81MzJGRENEQzNF MTExMUVCQUUwMDIxNkNDNEY5QUUwMi9yU0hwV2lZYUxvQWw0enlwVklKY0ZIQ3p0 Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JTSHBXaVlhTG9BbDR6eXBWSUpjRkhDenQ2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDhDNC81MzJGRENEQzNFMTExMUVCQUUwMDIxNkNDNEY5QUUwMi9yU0hwV2lZYUxv QWw0enlwVklKY0ZIQ3p0Nk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAJlZ8sQWbq695doyycjxm3O/i+0c4jCOlHZddmbAlpgRPjL3FIE2EHuX2sLyu QdwLJzO2eqKwo/fIGaMnjI9ngC+HibNQImajvFX29Cgjllftuq0hK1VH1NXe90lk i8PAWNpXxchVIKKURTeA4j7RjKAjPMPPHDQpL3rbrbkb5RnYM8t/kwtKUZkyh5Qv SXbeM0/fI6tD6MnTHHD52WL1WLXz14x7K4Kd7U4RwA7U/ySPgrBjxHKJvQJfIRQc 6QjBONKkX/o+tyqsJ23GG4BFRx4VsETvhspCsqxuQb+8bg3Q4qw+9CYqrm88dSUC I+/jXszxKD/jo4YJu1vYgs0DKQ== -----END CERTIFICATE-----Generated at Sat Mar 28 12:07:33 2026 by rpki-client